PHP Vulnerability Responses by Company

GMO Internet, Inc.

Japan-based services
Aliases / services
ConoHa / ConoHa WING / コノハ / このは / GMO Internet / GMOインターネット株式会社 / GMO Internet, Inc. / ConoHa VPS / ConoHa for GAME / お名前.com / Onamae.com / Onamae.com（お名前.com） / onamae.com / お名前.comレンタルサーバー
Official website
https://www.conoha.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

ConoHa WING

Response status
All offered PHP versions patched
Response information checked
2026-10-27 Rechecked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Patching finished on October 22 at 20:45 JST without changing displayed versions. Suspended management features resumed.

Scope: ConoHa WING PHP environments.

What users should do

No PHP version switch required for this fix.

Official service URL

Source URLs

  1. ConoHa WING: Final PHP remediation noticehttps://www.conoha.jp/wing/news/?ap=2015054909&btn_id=top--news_wing-newsResponse evidence

ConoHa VPS

Response status
User-managed PHP update required
Response information checked
2026-10-27 Rechecked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The advisory names both CVEs and requests updates; it does not claim all customer VPS instances are patched.

Scope: ConoHa VPS instances running affected PHP.

What users should do

Update to PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12 or later; migrate unsupported branches.

Official service URL

Source URLs

  1. https://vps.conoha.jp/news/?ap=2015054905&btn_id=top--news_newshttps://vps.conoha.jp/news/?ap=2015054905&btn_id=top--news_newsResponse evidence

ConoHa for GAME

Response status
Not listed
Response information checked
2026-10-27 Rechecked: 2026-10-27

Current re-audit: Official sources searched; no response found · Research date: 2026-10-27

Official news, support and targeted searches did not yield a service-specific PHP response. The October 24 signup suspension does not state a PHP cause.

Scope: Do not apply WING or VPS conclusions to this service.

What users should do

Ask official support about the environment you use.

Official service URL

Source URLs

  1. https://game.conoha.jp/news/https://game.conoha.jp/news/Service and operation documentation
  2. https://game.conoha.jp/news/?ap=2015054920&btn_id=news--news_newshttps://game.conoha.jp/news/?ap=2015054920&btn_id=news--news_newsService and operation documentation
  3. https://support.conoha.jp/https://support.conoha.jp/Service and operation documentation

Onamae.com websites and control panels

Response status
PHP response announced as ongoing
Response information checked
2026-10-27 Rechecked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 22 notice describes work on websites and control panels; reviewed notices do not establish completion across all panels.

Scope: Websites and control panels; hosting completion has separate scope.

What users should do

Follow the notice for your contracted service.

Official service URL

Source URLs

  1. https://www.onamae.com/news/article/11591https://www.onamae.com/news/article/11591Response evidence

Onamae.com hosting — Basic / RS / AI Homepage Pack

Response status
Offered PHP versions patched for named plans
Response information checked
2026-10-27 Rechecked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Patching finished October 22 at 20:45 JST; displayed versions were retained and suspended tools resumed.

Scope: Basic, RS and AI Homepage Pack only; excludes SD, GS and Desktop Cloud.

What users should do

No PHP version change required for this fix.

Official service URL

Source URLs

  1. https://www.onamae.com/news/article/11594https://www.onamae.com/news/article/11594Response evidence

Onamae.com SD / Mail / Homepage Editor

Response status
PHP 7.4 / 8.4 patched; older versions mitigated
Response information checked
2026-10-27 Rechecked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 23 update distinguishes patches from mitigation for PHP 7.3 and earlier. A host-specific ongoing-work statement remains.

Scope: SD, Onamae Mail and Homepage Editor; no blanket completion claim.

What users should do

Upgrade older versions as advised; confirm feature availability for your host.

Official service URL

Source URLs

  1. https://www.onamae.com/news/article/11596https://www.onamae.com/news/article/11596Response evidence

Onamae.com Shared Server GS

Response status
Not listed
Response information checked
2026-10-27 Rechecked: 2026-10-27

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-27

The October 26 notice describes a preventive control-panel suspension while hosting continues, without stating PHP patch completion or a PHP cause.

Scope: Shared Server GS only.

What users should do

Check official updates for reopening and PHP status.

Official service URL

Source URLs

  1. https://www.onamae.com/news/article/11607https://www.onamae.com/news/article/11607Service and operation documentation

Onamae.com Desktop Cloud

Response status
Not listed
Response information checked
2026-10-27 Rechecked: 2026-10-27

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-27

Official updates on October 27 report attacker publication of information and an ongoing investigation. The reviewed notices do not establish a PHP cause.

Scope: Desktop Cloud incident, separately from PHP response.

What users should do

Follow official customer instructions on scanning, backups and account protection; avoid alleged leaked-data sites.

Official service URL

Source URLs

  1. https://www.onamae.com/news/article/11598https://www.onamae.com/news/article/11598Service and operation documentation
  2. https://www.onamae.com/news/article/11613https://www.onamae.com/news/article/11613Service and operation documentation
  3. https://www.onamae.com/news/article/11614https://www.onamae.com/news/article/11614Service and operation documentation
Related official sources
  1. ConoHa WING: Final PHP remediation noticeOfficial noticeNotice updated: 2026-10-22T20:45:00+09:00

Comments